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AMENDMENTS TO THE CLAIMS 

Claims 1-24 are pending in the instant application. Claims 1-10, 12-13, 17-22, 
and 24 have been amended. The Applicant requests reconsideration of the claims in 
view of the following amendments reflected in the listing of claims. 

Listing of claims: 

1. (Currently Amended) A method of providing physical port security in a 
digital communication system, comprising the st e ps of : 

[[a.]] receiving a frame of digital data at a network device[[,]]i 

[[b.]] generating a destination port bit map based on the destination 
address information contained in said frame of digital data[[,]]; 

[[c.]] comparing said destination port bit map with a physical port 
security bit map to generate a bit map of allowed destination ports, wherein said 
physical port security bit map is generated based on information in said received 
frame of digital data: and 

[[d.]] forwarding said frame of digital data to one or more of said 
allowed destination ports. 
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2. (Currently Amended) The method of claim 1, wherein [[the]]sajd comparing 
st e p i nc l ud e s th e step of comprises conducting a logical AND on said destination port 
bit map and physical port security bit map. 

3. (Currently Amended) The method of claim 1, whefetn — comprising 
generating said physical port security bit map i s g e n e rat e d using source address 
information contained in said digital data frame. 

4. (Currently Amended) The method of claim 1, wh ere in — comprising 
generating said physical port security bit map is g e n e rat e d using destination address 
information contained in said digital data frame. 

5. (Currently Amended) The method of claim 1, whefein — comprising 
generating said physical port security bit map is g e n e rat e d using a combination of 
source and destination address information contained in said digital data frame. 

6. (Currently Amended) The method of claim 1, wherein said address 
information ffisll comprises IP address information. 

7. (Currently Amended) The method of claim 1, wherein th e d e v i c e that 
r e c e iv e s a said frame of digital data is received by a router. 
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8. (Currently Amended) The method of claim 1, wherein the d o v i c o that 
r e ceiv e s th e said f rame of digital data is received by a network file server. 

9. (Currently Amended) The method of claim 1 , wherein said network device 
comprises one or more t he-phvsical ports of the d e vice that rec ei v e s th e fram e of dig i ta l 
data ar e connected to a local area network. 

10. (Currently Amended) The method of claim 1, wherein the -said received 
frame of digital data is received from a process that is inside of said network device. 

1 1 . (Original) The method of claim 1 , wherein said physical port security bit 
map is generated dynamically based on a variable parameter. 

12. (Currently Amended) +n — an — interm e diat e — n e twork — device — hav i ng — a 
commun i cations port for rec ei v i ng dig i ta l data from a dig i tal commun i cations syst e m and 
two — or mor e phys i ca l data ports for forwarding sa i d dig i ta l data, a A system for 
providing physical port security., in th e digita l commun i cation syst e m comprising: 

a t least one processor within a network device, said network device having a 
communications port for receiving digital data from a digital communications system and 
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two or more physical data ports for forwarding said digital data, said at least one of 
processor enables: 



bit map to generate a bit map of allowed destination ports, wherein said physical port 
security bit map is generated based on information within said received digital data; and 

forwards forwarding of said digital data to one or more of said allowed destination 

ports. 

13. (Currently Amended) The system of claim 12, wherein said microproc e ssor 
conducts at least one processor enables conducting of a logical AND operation on said 
destination port bit map and said physical port security bit map. 

14. (Original) The system of claim 12, wherein said physical port security bit 
map is generated using source address information contained in said digital data. 

15. (Original) The system of claim 12, wherein said physical port security bit 
map is generated using destination address information contained in said digital data. 




generation of a destination port bit map based on the destination 



address information contained in said received digital data[[,]]; 



:omparing of said destination port bit map with a physical port security 
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16. (Original) The system of claim 12, wherein said physical port security bit 
map is generated from a table of stored allowed physical port addresses that varies 
depending on a combination of source and destination address information contained in 
said digital data. 

17. (Currently Amended) The system of claim 12, wherein said address 
information rfisll comprises IP address information. 

18. (Currently Amended) The system of claim 12, wherein said network device 
comprises t ho devic e that rocoives th e digital data i s a router. 

19. (Currently Amended) The system of claim 12, wherein said network device 
comprises the d e vic e that rec ei v e s th o digital data is a network file server. 

20. (Currently Amended) The system of claim 12, wherein rrthell said two or 
more physical data ports of rrthell said network device that r e c e iv e s th o d i g i ta l data are 
connected to a local area network. 

21. (Currently Amended) The system of claim 12, wherein rrthell said digital 
data rfisll comprises IP data. 
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22. (Currently Amended) The system of claim 12, wherein [fthell said at least 
one processor retrieves said physical port security bit map is r e tri e ved by th e 
m i croproc e ssor based on IP source address contained in ffthell said digital data. 

23. (Original) The system of claim 12, wherein said network device is the 
source of said received digital data. 

24. (Currently Amended) The system of claim 12, wherein ITthell said physical 
port security bit map is dynamically altered based on a variable parameter. 
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